Damn. A Brazilian certificate authority trusted only by Microsoft has issued a presumably-unauthorized certificate for google.com: https://follow.agwa.name/notice/AoZSMI38xcA3TrN1sm
All security practices in the world are useless if one of the most visited sites such as Google gets a unauthorized TLS certificate issued. How this still exists in 2024 is beyond me.